Route Origin Authorization

$ rpki-client -vvf rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa
File:                     326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa (raw, json)
Hash identifier:          7kohGleBXa5JpKgqpqduEwUm3n/oobt3SsjsWYLUUiU=
Subject key identifier:   7E:03:84:6D:0D:21:E3:E6:08:5F:A4:47:75:5D:D9:D6:EF:88:C2:C3
Certificate issuer:       /CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
Certificate serial:       401FAEF23C2486A9E05DDA8AA09CFFC9F0766AC8
Authority key identifier: 7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer
Subject info access:      rsync://rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa
Signing time:             Sun 09 Apr 2023 04:33:04 +0000
ROA not before:           Sun 09 Apr 2023 04:28:04 +0000
ROA not after:            Sun 07 Apr 2024 04:33:04 +0000
asID:                     199177
IP address blocks:        2a05:dfc1:1fd0::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1f:ae:f2:3c:24:86:a9:e0:5d:da:8a:a0:9c:ff:c9:f0:76:6a:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B5F4A660DBE7E63A8BDE6C43474A3545E771B31
        Validity
            Not Before: Apr  9 04:28:04 2023 GMT
            Not After : Apr  7 04:33:04 2024 GMT
        Subject: CN=7E03846D0D21E3E6085FA447755DD9D6EF88C2C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7e:22:84:94:cb:65:3a:a1:6d:b2:e6:78:b9:
                    16:cc:a2:0b:ee:3f:28:43:44:44:32:da:ec:02:7f:
                    43:76:28:34:e8:85:55:56:6d:0a:08:ca:f4:47:5c:
                    c8:16:58:7f:d0:ab:b1:11:95:15:ab:7c:7a:fa:f7:
                    3b:d4:d7:7d:86:96:eb:54:60:5e:bd:db:37:63:d3:
                    ea:c7:f3:09:2d:08:03:6c:3d:1e:76:51:45:5a:fa:
                    a0:aa:34:af:d5:6f:48:ca:10:96:bd:d0:da:06:78:
                    5b:68:9e:9f:0e:59:3b:6e:7d:9d:1c:4c:32:ac:35:
                    0c:75:6d:79:e7:d4:19:07:19:30:42:d9:b0:8b:e7:
                    d7:c0:90:56:38:09:fa:93:10:6a:39:c7:4e:6c:5a:
                    ae:6a:1b:cb:e3:75:a8:52:72:12:90:2c:16:f2:c2:
                    84:ee:0d:4f:89:d0:c4:fc:1e:64:db:db:ea:b0:f9:
                    59:55:af:27:45:7d:e1:d9:5b:00:1a:2d:72:5d:c7:
                    0b:7d:b8:61:67:9c:4b:24:4d:ab:70:68:7e:83:82:
                    a8:27:d8:a9:72:09:75:9d:02:52:e6:ab:80:bb:81:
                    78:f7:27:d6:8e:9b:86:16:9d:6c:4b:d5:b6:ff:f5:
                    5a:a2:cd:0a:16:a2:9f:a3:44:1d:3e:b4:16:36:47:
                    81:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:03:84:6D:0D:21:E3:E6:08:5F:A4:47:75:5D:D9:D6:EF:88:C2:C3
            X509v3 Authority Key Identifier:
                keyid:7B:5F:4A:66:0D:BE:7E:63:A8:BD:E6:C4:34:74:A3:54:5E:77:1B:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/7B5F4A660DBE7E63A8BDE6C43474A3545E771B31.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.kitten.network/repo/MythicalKitten/1/326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1fd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         42:85:2b:e3:76:83:3f:ae:5b:f5:46:f6:18:2f:01:9b:db:b0:
         73:15:8b:51:09:06:22:08:95:3d:e4:5b:ed:77:ac:4e:74:ce:
         be:ac:84:32:a2:c5:7d:ee:42:c9:96:7a:86:8b:39:06:9f:8c:
         10:1e:91:9b:b2:38:3a:67:ca:23:ff:15:ab:54:09:6b:6c:93:
         32:39:75:31:bc:21:73:6e:fb:97:a8:aa:6d:09:67:84:e9:3d:
         f5:36:6d:ed:a1:f0:66:b0:4f:cf:8b:38:bd:46:6d:61:f3:92:
         91:b3:5a:96:7b:51:78:ce:64:a0:be:62:df:b3:87:ac:69:ff:
         aa:e0:6c:45:67:0a:ba:a5:fb:fe:ce:c1:e6:0c:fa:e1:33:35:
         c6:93:01:72:03:b2:a3:4a:55:3c:09:05:9d:02:a8:c9:13:d9:
         24:43:e6:06:51:a3:31:89:f2:4d:29:b6:64:06:7b:d4:26:58:
         f4:8d:8a:fe:f0:ac:2a:d7:dc:95:fc:38:46:81:fd:b8:7a:11:
         98:23:3f:2f:d5:b1:b1:4a:f6:aa:a7:d1:53:b9:1f:33:a9:3d:
         79:b8:3a:48:7f:ea:e0:fa:d9:ef:44:78:42:a5:f5:ed:96:51:
         61:ff:e6:d7:c4:53:8d:cf:ff:4c:f3:63:21:d0:0c:30:ad:df:
         fd:78:b8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----